A vulnerability in Google Chrome allows remote attackers to bypass authorization controls and access sensitive information through malicious browser extensions.

This vulnerability involves incorrect authorization within the browser permissions model, which can be exploited by an attacker using social engineering to facilitate unauthorized data access. The flaw is exploitable by an unauthenticated remote attacker.

The ability for an unauthorized party to access sensitive user information poses a significant risk to data privacy and organizational security. While the CVSS score of 7.5 indicates a high severity, the potential for data exfiltration via browser extensions could lead to the compromise of corporate credentials or proprietary information.

Immediate Action: Update all instances of Google Chrome to version 153.0.8010.36 or later immediately to apply the necessary authorization fixes.

Proactive Monitoring: Monitor browser extension installation logs and endpoint security telemetry for unauthorized or suspicious extension activity across the fleet.

Compensating Controls: Implement browser management policies that restrict the installation of extensions to only those explicitly approved or managed by the organization.

Public Exploit Available: No (exploit_available: false)

Given the high CVSS score and the nature of the flaw, administrators should treat this update with high priority. Organizations should enforce browser version compliance through centralized management tools to ensure all endpoints are patched against this authorization bypass.